Add File and Folder Exclusions to Forefront Endpoint Protection 2012

To exclude files and folders from malware scans

1. In the Client Security console, create or edit a policy. For details about how to create or edit a policy, see Creating, editing, copying, and deleting policies.
2. In the New Policy or Edit Policy dialog box, click the Advanced tab.
3. Under Exclusions from malware scans and immediately to the right of the File and folder paths box, click Add. The Exclude Path dialog box appears.
4. Enter the full path to a file or folder you want to exclude. Note the following:

• File and folder exclusions are enforced only at the exact locations you specify in the policy. If the file or folder you specify exists in a different location on a client computer than the location you specified in the policy, the file or folder is not excluded from scans on the client computer.
• You can use environment variables, such as %SYSTEMDRIVE%, to specify paths. For example:%SYSTEMDRIVE%cdb.exeIf the variable does not exist on a client computer, Client Security cannot correctly enforce the exclusion.
• Client Security does not scan the subfolders of an excluded folder.

Click OK, and then click OK to close the Exclude Path dialog box.

5. Continue adding exclusions, as needed.
6. After you finish creating or editing the policy, click OK.
7. To apply the policy to client computers, you must deploy the policy. For information about deploying a policy, see Deploying and undeploying policies.

To exclude file types from malware scans

1. In the Client Security console, create or edit a policy. For details about how to create or edit a policy, see Creating, editing, copying, and deleting policies.
2. In the New Policy or Edit Policy dialog box, click the Advanced tab.
3. Under Exclusions from malware scans and immediately to the right of the Extensions box, click Add. The Exclude Extension dialog box appears.
4. Type the extension of the file type you want to exclude, and then click OK.
5. Continue adding file type exclusions, as needed.
6. After you finish creating or editing the policy, click OK.
7. To apply the policy to client computers, you must deploy the policy. For information about deploying a policy, see Deploying and undeploying policies.

To remove exclusions from malware scans

1. In the Client Security console, create or edit a policy. For details about how to create or edit a policy, see Creating, editing, copying, and deleting policies.
2. In the New Policy or Edit Policy dialog box, click the Advanced tab.
3. Under Exclusions from malware scans, in either the File and folder paths box or the Extensions box, select the exclusion you want to remove.
4. Immediately to the right of the box containing the selected exclusion, click Remove.
5. Continue removing file type exclusions, as needed.
6. After you finish creating or editing the policy, click OK.
7. To apply the policy to client computers, you must deploy the policy. For information about deploying a policy, see Deploying and undeploying policies.